Web Application Firewall Access controls

Summary or request:

I have a customer that requires to modify its WAF policy due a certain problem regarding his specific use case, that I allow me to share it:

Use case

• Accept valid incoming traffic from public 2 specific public IP addresses without be blocked by the WAF when they enable control access and protection rules

Problem description

The use case refers to a client that has defined access and protection controls to block unwanted traffic based on certain types of attacks and allow certain valid traffic.Specifically, with the protection controls, the problem is that public IP addresses are being blocked and no exception is made for valid originating clients, that is, when the controls are enabled, unfortunately all valid traffic is blocked.